CVE-2026-15154

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

CVE-2020-15154

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: contentfields.php, contentinfo.php, contentoptions.php, contentrelated.php, indexlisttree.php, jquery.bcTree.js...

CVE-2017-15154

...

CVE-2017-15154

CVE-2017-15154 is rejected/not used; the candidate was withdrawn by its CNA.

CVE-2020-15154

CVE-2020-15154 affects baserCMS 4.3.6 and earlier, enabling Cross Site Scripting (XSS) via arbitrary script execution with admin privileges required. Affected components include: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, and jquery.bcTree...

CVE-2020-15154 Cross Site Scripting in baserCMS

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: contentfields.php, contentinfo.php, contentoptions.php, contentrelated.php, indexlisttree.php, jquery.bcTree.js...

CVE-2018-15154

OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sleobsearch.php after modifying the "printcommand" global variable in interface/super/editglobals.php...

CVE-2018-15154

OpenEMR versions prior to 5.0.1.4 are affected by an OS command injection vulnerability. An authenticated remote attacker can craft a request to interface/billing/sl_eob_search.php after modifying the print_command global in interface/super/edit_globals.php to execute arbitrary commands. The issu...